Re: 404 handler mkicks in before ISAPI filter

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 03/08/04 

Date: Mon, 8 Mar 2004 09:36:05 -0800

Please do not multi-post.

This looks to be a bug in the ISAPI Filter you are using and has nothing to
do with IIS.

If properly written, an ISAPI Filter WILL be able to do all those URL
transformations before the 404 Handler is even invoked.

You want it to do this:
www.mydomainname.com/param1/value1 --> www.mydomainname.com?param1=value1

But it may be doing this (I have no idea how the ISAPI Filter is choosing to
rewrite URLs):
www.mydomainname.com/param1/value1 --> www.mydomainname.com/param1?value1=

Which would probably result in a legitimate 404 since /param1 does not
exist. 

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Yoram Ayalon" <yoram.ayalon@structuredweb.com> wrote in message
news:1f08621e.0403061122.60857944@posting.google.com...
Tim,
thanks for the info but I don't think this is relevant. I am not
creating any virtual directories here, its simply a case of the IIS
trying to resolve the URL to a physical file or folder BEFORE the
ISAPI filter has a chance to convert the slashes to a valid query
string.
"Tim Heuer" <tim@nospam.timheuer.com> wrote in message
news:<etvoowwAEHA.684@tk2msftngp13.phx.gbl>...
> http://support.microsoft.com/?kbid=275601
> "Yoram Ayalon" <yoram.ayalon@structuredweb.com> wrote in message
> news:1f08621e.0403051420.57e4e7e9@posting.google.com...
> >I installed an ISAPI filter that translates "forward slashes" at the
> > end of a URL to a query string format, ex:
> > www.mydomainname.com/page1.asp/param1/value1
> > will be translated to: www.mydomainname.com/page1.asp?param1=value1
> >
> > however, if the incoming URL is
> > www.mydomainname.com/param1/value1
> > then the 404 handler for the default web site kicks in BEFORE the
> > isapi filter has a chance to translate.
> > page1.asp is the default page for the default web site, if the
> > incoming URL is www.mydomainname.com?param1=value1 it works just fine.
> >
> > How can I fix this?
> >
> > IIS version 5.0 on win2K
> >
> > NOTE: I need the 404 handler on the default web site, since I need to
> > catch obsolete folder names. I tried to return to the default handling
> > but still it kicks in before the ISAPI filter.

Relevant Pages

  • Re: Create IIS Web Site via ADSI scripting - ISAPI Error
    ... It wasn't the ISAPI filter or how it was being added but how the site was being set up via the script. ... Used the web MetaSchema to compare properties/settings for a manual and scripted web site which helped 2 raise these issues. ... I need to create an IIS Web Site but I want to script this and as part of ...
    (microsoft.public.inetserver.iis)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... culprits whenever IIS is not behaving the way it should. ... It sounds like the ISAPI Filter is doing one standard Custom ... back a HTML page that POSTs the username/password back to the server. ... Account: COMPUTERNAME\ACCOUNTNAME Access type: FULL ...
    (microsoft.public.inetserver.iis.security)
  • An exercise to exploit IIS ISAPI filter
    ... I began curious how they manage to reproduce around the Internet ... The filter is used by IIS on Window ... Service Manager,choose properties, then ISAPI Filter and from here you can ... An Access violation exception happen when IIS filter handling the ...
    (Vuln-Dev)
  • Re: Using IIS ISAPI filters on ISA 2000 as web filters
    ... that works wonderfully in IIS. ... configure an IIS ISAPI filter to act as a "webfilter" within the ... that intercepts HTTP requests and lets you authenticate ... >> Activate filter code ...
    (comp.security.firewalls)
  • RE: IIS 6.0 COM App cant write to event log
    ... I have created a WSDL from it using the SOAP Toolkit. ... When I connect from a SOAP client, my ActiveX DLL starts ... IIS 6.0 features. ... ISAPI Filter or ISAPI Extension. ...
    (microsoft.public.inetserver.iis.security)